False Base Station Detection via Secret Paging in RRC Inactive

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless networks face issues with false base stations that can deny service, attack user equipment (UE), provide rogue services, or compromise subscriber privacy, with existing solutions failing to effectively detect and mitigate these threats, especially for UE in RRC Idle or Inactive states.

Innovation Solution

The implementation of a system that includes a transceiver and processor to connect to a base station, verify its authenticity in an inactive state, and disconnect if authenticity fails, using secret paging messages and secret Temporary Mobile Subscriber Identifiers (S-TMSI) to ensure the UE is connected to a genuine base station, thereby enhancing security against false base stations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the UE continuously monitors base station authenticity, then security against false base stations is improved, but energy consumption increases

Engineering Contradiction:
Improvesecurity against false base stationsVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements periodic authenticity verification by monitoring for secret paging messages at predetermined time intervals rather than continuous monitoring. The UE checks for the presence of secret paging messages configured by the network at specific DRX cycles, which provides periodic security verification while allowing the UE to enter low-power sleep modes between verification intervals, thus significantly reducing energy consumption compared to continuous monitoring.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The patent employs self-service mechanisms where the UE autonomously verifies base station authenticity by checking for secret paging messages without requiring continuous network intervention. The UE independently monitors for authenticity indicators and can disconnect from false base stations autonomously, reducing the need for constant network-managed verification and lowering overall system energy consumption.

Inventive Principle:
Principle #25Self-service

2Reliability

If the UE verifies base station authenticity in inactive state, then security coverage is improved, but system complexity increases

Engineering Contradiction:
Improvesecurity coverageVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent makes the authenticity verification mechanism universal by integrating it into the existing RRC Inactive state workflow. The secret paging message mechanism serves multiple functions: it verifies base station authenticity, provides security coverage for inactive UEs, and can be configured by the network based on threat levels. This multi-functional approach expands security coverage without requiring entirely new complex verification systems.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces secret paging messages as an intermediary mechanism between the network and UE for authenticity verification. Instead of complex direct verification protocols, the network sends encrypted paging messages containing authenticity indicators to the UE during inactive state. This intermediary approach simplifies the verification process for the UE while providing robust security coverage, as the UE only needs to check for the presence and validity of these paging messages.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If secret paging messages are transmitted frequently, then detection accuracy is improved, but network overhead increases

Engineering Contradiction:
Improvedetection accuracyVSAvoidnetwork overhead
Core Design Contradiction:
Measurement precisionVSQuantity of substance

Solution Approach 1:

The patent implements periodic transmission of secret paging messages at configured intervals rather than continuous or frequent transmission. The network determines appropriate transmission timing based on DRX cycles and security risk assessment, sending secret paging messages only when necessary to maintain detection accuracy. This periodic approach ensures the UE can verify authenticity at appropriate intervals while minimizing unnecessary network overhead compared to frequent or continuous messaging.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The patent dynamically adjusts messaging parameters based on security risk levels and network conditions. The network can modify the frequency and timing of secret paging message transmissions based on detected threat levels, cell characteristics, and UE behavior patterns. This parameter adaptation allows the system to maintain high detection accuracy in high-risk scenarios while reducing network overhead in low-risk situations, optimizing the balance between security and resource consumption.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20240381082A1Enhancing security against false base stations
Publication Date: 2024.11.14 LENOVO (SINGAPORE) PTE LTD
  • US20240381082A1 patent drawing
  • US20240381082A1 patent drawing
  • US20240381082A1 patent drawing

AI summary

Apparatuses, methods, and systems are disclosed for enhancing security against false base stations. An apparatus (700) includes a transceiver (725) and a processor (705) that is coupled to the transceiver (725). The processor (705) is configured to cause the apparatus (700) to connect to a base station of a mobile wireless communication network, verify an authenticity of the connected base station while in an inactive state, and disconnect from the connected base station in response to the authenticity of the connected base station failing.